Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication Vulnerabilities

Multiple Korenix products are affected by unauthenticated device administration, backdoor accounts, cross site request forgery, unauthenticated tftp actions, and command injection vulnerabilities. Products affected include JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4706, JetNet 4706,...

CVE-2020-12500

CVE-2020-12500 describes an improper authorization vulnerability that permits unauthenticated device administration on Pepperl+Fuchs P+F Comtrol RocketLinx models (e.g., ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT) an...

CVE-2020-12500 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions allows unauthenticated device administration...

CVE-2020-12500

creationtimestamp| type| source ---|---|--- 2020-10-07 11:00:02+00:00| seen| https://t.me/SecLabNews/8977...